How to stop hackers from disconnecting VPN secure client

Comodo Internet Security - CIS Firewall Help - CIS
#1

Hi everyone.

Sorry for my english, is not my native language.

Ok guys I suppose I have a basic and intermidiate level using comodo firewall. But I reach certain point where I should ask for help.

I recently send this email to my poker room, I hope some one can give me a hand.

The vpn I use is proxpn. I also use comodo trustconnect. But some how the hacker knows how to constantly disconnect the trustconnect connection. With proxpn is the same but the disconections are not to often, when there is no disconnection usually is cause the hacker found a way to avoid vpn security. Is not always the case. Sometimes when there is no disconnection is cause vpn is giving a hard time to hacker to get in, sop he dicides to go plan B. And it when he disconnect vpn client. Usually when it happends the client try reconnect, and it does. But the hacker its inside and get away with it.

Can I use Comodo Firewall plus vpn secure connections with party poker client, or its not allowed?
Or your party poker client will behave in certain way not favorable for the customer or poker player, if it detects I am using this tools?
If so, what firewall and vpn client do you guys recommend?

Unfurntanly I saw your website specially cash games is ful ofl hackers, some of them russians. And its obvious and logic that party poker atract this kind of people. After all is easy money we are talking about.

In my tests, it seems that when I encrypt my connection with vpn secure, it give this hackers a hard time. But they always get away with their cheat, and they disconnect my vpn secure connection, with atack to net bios, or overflow, or sniffing, or ARP atack or whatever.

This happends specially and intensifies at cash games where the hacker can sit confortable at the same time with his victim, at the same table

In tourneys it happends, but they get a really really really hard time there, because they will have to be at same table of the victim, and cause of the constantly siwthching tables. So they prefer cash tables.

What you guys recommend me in order to having to avoid this situations. I am already a long term winner player at poker. The only reason I do not make money Is because of this.

I would apprecciate any support on this matter. Thanks

I use shieldsup website, all the test are good. There is be something or an option in comodo firewall, that will fix my problem the thing is I dont know what is is.

#2

How do you know your being disconnected from the vpn by a hacker, have you tried wiresharking the connection?

#3

Cause the disconnections occur only when I play poker at poker room. I never never never not even once I have been disconnected Surfing internet or doing stuff in my pc, And cause the way hackers behave at the poker table and their patterns when they cheat and when they not.

For someone who has play online poker 10 years like me its easy to spot when the cheat occurs, for some one new at online poker. Probable is going to think is legitime poker variance lol :).

But I put a nice configuration for comodo and the hacker gets away with it.

Firewall:

Custom policy or safe mode
create rules for safe applications
All extra options checked that offer extra security
Block all incoming connections and hide my ports for everyone. Blocks ICMP echo requests, etc
I can see only one conection from the dhcp server from my ISP, in green outgoing, that is ARP connection 255.255.255.255 in order to ISP assign me ip
All check marks on ARP protections etc…
Even installing the poker room on a virtual machine VMWARE guesst, and vpn outside in host. Some times it takes a lot of time for hacker to get in, but after hours he get away with it.
I play in a not priviliged rights account. Power User
Very strong password for administrator account
Very heavely modified xp pro, with optimisations in security and speed. If I disactivate all firewall and go to shields up website, all ports are in blue closed. Just one is in green, Hidden status. 646/ldp LDP
In shields up website, all ports appear to be closed and hidden at the same time in green, firewall on
Antivirus essentials, panda cloud, kapersky, avg, malwarebytes, avast, Linux ubuntu etc, everything clean, the problem is defenetly and %100 not a virus.
Panda cloud beta firewall, sais that the poker room party poker, one of our test shows that there is fraudulent and malicious activity. (Hackers)
WINS tab local area connection, NetBios setting:Disable netbios over TCP/IP option.
My computer,device manager,view,sow hidden devices, non plug and play drivers, uninstall: Netbios over tcpip

Shields UP, file sharing:

With firewall off:

Preliminary Internet connection refused!
This is extremely favorable for your system’s overall Windows File and Printer Sharing security. Most Windows systems, with the Network Neighborhood installed, hold the NetBIOS port 139 wide open to solicit connections from all passing traffic. Either this system has closed this usually-open port, or some equipment or software such as a “firewall” is preventing external connection and has firmly closed the dangerous port 139 to all passersby. (Congratulations!)

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.

With firewall on:

Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that’s very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.

All service ports: firewall on:

Your system has achieved a perfect “TruStealth” rating. Not a single packet — solicited or otherwise — was received from your system as a result of our security probing tests. Your system ignored and refused to reply to repeated Pings (ICMP Echo Requests). From the standpoint of the passing probes of any hacker, this machine does not exist on the Internet. Some questionable personal security systems expose their users by attempting to “counter-probe the prober”, thus revealing themselves. But your system wisely remained silent in every way. Very nice.

So what am I missing, how the hell the hacker its capable of disconnecting my proxpn, client. Green goes yellow, reconnects a couple of seconds, hacker is inside. lol :slight_smile:

Any ideas and help from everyone is very very much appriciate it from the buttom of my heart. Thanks

#4

Use a legal legit poker site. Where players dont get your ip!

Its a bit difficult to read all your experiences.
If a “hacker” is able to disconnect you, while he can not know your ip, through a vpn… you probably have a malware on your computer.

Your procedure is way beyond what a normal page would require you to do.
Possible conclusions:
1)The page is bad.
or
2)The computer is infected.

#5

Or you have a bad VPN, I get disconnects from VPNs all the time for a variety of reasons, updates, system maintance, bad routing/tunneling, etc.

#6

Thanks dude your comment put me on the right track. You %100 are right it was the poker room party poker, is bad.

Comodo, panda cloud beta firewall, webutation and Emsisoft warn me that, there is fraudulent behavior and malicious activity. Also I check a little bit on the backround of this poker room, and what I saw was not good at all.

Thanks so much guys, you help me a lot

#7

This may help you in the future:
How to Tell If A Website Is Dangerous

#8

Yep, it comes very handy, thanks for the link